Log of /puppet

---

Revision 472 - Directory Listing
Modified Thu Nov 25 17:48:11 2010 UTC (13 years, 4 months ago) by misc

filter mail trough amavis ( for spamassassin ) and block some extension

---

Revision 471 - Directory Listing
Modified Thu Nov 25 17:48:10 2010 UTC (13 years, 4 months ago) by misc

restart amavis on configuration file change

---

Revision 470 - Directory Listing
Modified Thu Nov 25 12:01:13 2010 UTC (13 years, 4 months ago) by blino

remove unused logdir

---

Revision 469 - Directory Listing
Modified Thu Nov 25 11:55:04 2010 UTC (13 years, 4 months ago) by blino

remove trailing slash in queue URL

---

Revision 468 - Directory Listing
Modified Thu Nov 25 11:52:01 2010 UTC (13 years, 4 months ago) by blino

upload packages as schedbot user for now

---

Revision 467 - Directory Listing
Modified Thu Nov 25 11:49:41 2010 UTC (13 years, 4 months ago) by blino

http queue is on http://pkgsubmit.mageia.org/uploads/

---

Revision 466 - Directory Listing
Modified Thu Nov 25 11:46:30 2010 UTC (13 years, 4 months ago) by blino

add pkgsubmit vhost

---

Revision 465 - Directory Listing
Modified Thu Nov 25 07:48:25 2010 UTC (13 years, 4 months ago) by blino

do not pass iurt logdir as argument, it would require a wrapper parsing the option, we will handle this in ulri

---

Revision 464 - Directory Listing
Modified Wed Nov 24 20:31:15 2010 UTC (13 years, 4 months ago) by misc

fix missing subscribe

---

Revision 463 - Directory Listing
Modified Wed Nov 24 20:31:13 2010 UTC (13 years, 4 months ago) by misc

fix path that prevent smtp to start

---

Revision 462 - Directory Listing
Modified Wed Nov 24 20:31:12 2010 UTC (13 years, 4 months ago) by misc

fix syntax

---

Revision 461 - Directory Listing
Modified Wed Nov 24 20:31:11 2010 UTC (13 years, 4 months ago) by misc

add a note about a missing deps

---

Revision 460 - Directory Listing
Modified Wed Nov 24 20:31:10 2010 UTC (13 years, 4 months ago) by misc

fix syntax

---

Revision 459 - Directory Listing
Modified Wed Nov 24 20:31:08 2010 UTC (13 years, 4 months ago) by misc

fix order of execution

---

Revision 458 - Directory Listing
Modified Wed Nov 24 20:31:07 2010 UTC (13 years, 4 months ago) by misc

add a ssmtp module, to replace postfix as it would be too complex to manage for both simple relay and full fledged server

---

Revision 457 - Directory Listing
Modified Wed Nov 24 15:22:18 2010 UTC (13 years, 4 months ago) by misc

add a Requires to fix bootstraping ( ie, puppet try to do the link
before bind is installed, and show a error )

---

Revision 456 - Directory Listing
Modified Wed Nov 24 15:22:16 2010 UTC (13 years, 4 months ago) by misc

fix svn directory

---

Revision 455 - Directory Listing
Modified Wed Nov 24 15:22:14 2010 UTC (13 years, 4 months ago) by misc

add requires on the package, so puppet doesn't send useless errors

---

Revision 454 - Directory Listing
Modified Wed Nov 24 15:22:13 2010 UTC (13 years, 4 months ago) by misc

fix svn location for catdap checkout

---

Revision 453 - Directory Listing
Modified Wed Nov 24 12:45:31 2010 UTC (13 years, 4 months ago) by misc

do not use default empty array, as puppet evaluate this as "true" and
therefore create the post-commit scripts with invalid values

---

Revision 452 - Directory Listing
Modified Wed Nov 24 11:14:33 2010 UTC (13 years, 4 months ago) by misc

- improve error message when trying to get a interactive shell

---

Revision 451 - Directory Listing
Modified Wed Nov 24 02:50:45 2010 UTC (13 years, 4 months ago) by misc

restrict login to people of the group mga-commiters ( previous try was
not working with ssh key )

---

Revision 450 - Directory Listing
Modified Wed Nov 24 02:08:32 2010 UTC (13 years, 4 months ago) by misc

s/commiters/committers/, to be in sync with the ldap group name and the dictionnary

---

Revision 449 - Directory Listing
Modified Wed Nov 24 01:39:17 2010 UTC (13 years, 4 months ago) by misc

move the group restriction at the top of the file, or they are useless

---

Revision 448 - Directory Listing
Modified Wed Nov 24 01:27:30 2010 UTC (13 years, 4 months ago) by misc

pam_wheel is made to be used with su only. pam_succeed_if seems to be the proper module

---

Revision 447 - Directory Listing
Modified Wed Nov 24 01:21:09 2010 UTC (13 years, 4 months ago) by misc

remove empty line from the result file ( <% vs <%- )

---

Revision 446 - Directory Listing
Modified Wed Nov 24 00:30:45 2010 UTC (13 years, 4 months ago) by blino

use FQDN for repository

---

Revision 445 - Directory Listing
Modified Wed Nov 24 00:29:20 2010 UTC (13 years, 4 months ago) by blino

fix homedir usage

---

Revision 444 - Directory Listing
Modified Wed Nov 24 00:28:05 2010 UTC (13 years, 4 months ago) by blino

if we use cache, make it use /home/iurt/cache instead of /home/iurt_cache

---

Revision 443 - Directory Listing
Modified Wed Nov 24 00:27:43 2010 UTC (13 years, 4 months ago) by blino

extract homedir

---

Revision 442 - Directory Listing
Modified Wed Nov 24 00:25:57 2010 UTC (13 years, 4 months ago) by blino

update comment as well

---

Revision 441 - Directory Listing
Modified Wed Nov 24 00:25:19 2010 UTC (13 years, 4 months ago) by blino

extract repository variable

---

Revision 440 - Directory Listing
Modified Wed Nov 24 00:14:48 2010 UTC (13 years, 4 months ago) by misc

- activate ldap only access

---

Revision 439 - Directory Listing
Modified Tue Nov 23 23:23:20 2010 UTC (13 years, 4 months ago) by blino

use http repository

---

Revision 438 - Directory Listing
Modified Tue Nov 23 23:23:17 2010 UTC (13 years, 4 months ago) by misc

fix permissions on tagmail.conf

---

Revision 437 - Directory Listing
Modified Tue Nov 23 23:17:48 2010 UTC (13 years, 4 months ago) by misc

the previous trick didn't work as tags are dependent in the order of
declaration ( and that's bad (tm) ). This one is safer.

---

Revision 436 - Directory Listing
Modified Tue Nov 23 23:17:47 2010 UTC (13 years, 4 months ago) by misc

move the ldap key from ssh logic to openssh module ( more logical ), and add the hook in openssh config file

---

Revision 435 - Directory Listing
Modified Tue Nov 23 23:17:46 2010 UTC (13 years, 4 months ago) by misc

link root keys in the /var/lib/pubkeys ( easier than to change the location of root keys deployed by puppet )

---

Revision 434 - Directory Listing
Modified Tue Nov 23 22:57:04 2010 UTC (13 years, 4 months ago) by blino

simplify nodes declaration

---

Revision 433 - Directory Listing
Modified Tue Nov 23 22:51:35 2010 UTC (13 years, 4 months ago) by blino

use same iurt command for both i586 and x86_64

---

Revision 432 - Directory Listing
Modified Tue Nov 23 22:27:30 2010 UTC (13 years, 4 months ago) by blino

fix upload.conf name (oops)

---

Revision 431 - Directory Listing
Modified Tue Nov 23 22:26:59 2010 UTC (13 years, 4 months ago) by blino

emi is more a gatherer than a dispatcher

---

Revision 430 - Directory Listing
Modified Tue Nov 23 22:24:27 2010 UTC (13 years, 4 months ago) by blino

add iurt upload.conf file for ulri and emi

---

Revision 429 - Directory Listing
Modified Tue Nov 23 22:08:58 2010 UTC (13 years, 4 months ago) by blino

move /etc/iurt creation with iurt user (rationale: if there is a iurt user, iurt tools will be used)

---

Revision 428 - Directory Listing
Modified Tue Nov 23 22:06:24 2010 UTC (13 years, 4 months ago) by blino

create /etc/iurt

---

Revision 427 - Directory Listing
Modified Tue Nov 23 22:05:33 2010 UTC (13 years, 4 months ago) by blino

manage dir recursively

---

Revision 426 - Directory Listing
Modified Tue Nov 23 22:00:44 2010 UTC (13 years, 4 months ago) by blino

ensure /etc/iurt/build is a directory

---

Revision 425 - Directory Listing
Modified Tue Nov 23 21:17:35 2010 UTC (13 years, 4 months ago) by blino

iurt build config should go in /etc

---

Revision 424 - Directory Listing
Modified Tue Nov 23 19:44:42 2010 UTC (13 years, 4 months ago) by blino

ssh user requires the associated group

---

Revision 423 - Directory Listing
Modified Tue Nov 23 19:44:01 2010 UTC (13 years, 4 months ago) by blino

add correct requires for sshuser creation

---

Revision 422 - Directory Listing
Modified Tue Nov 23 16:03:02 2010 UTC (13 years, 4 months ago) by misc

automatically pull apache::base to be consistant with others define

---

Revision 421 - Directory Listing
Modified Tue Nov 23 16:01:26 2010 UTC (13 years, 4 months ago) by misc

- do not include apache::mod_fcgid as bugzilla do not use fast cgi, and apache::base is already included

---

Revision 420 - Directory Listing
Modified Tue Nov 23 13:29:44 2010 UTC (13 years, 4 months ago) by buchan

Allow users to write their own sshPublicKey, and all users to read it

---

Revision 419 - Directory Listing
Modified Tue Nov 23 07:22:58 2010 UTC (13 years, 4 months ago) by blino

remove unneeded commas

---

Revision 418 - Directory Listing
Modified Tue Nov 23 07:21:44 2010 UTC (13 years, 4 months ago) by blino

add jonund and fix adresses

---

Revision 417 - Directory Listing
Modified Tue Nov 23 07:15:22 2010 UTC (13 years, 4 months ago) by blino

allow repository http acces from buildsystem nodes
(hardcoding their IPv6 address since we have no reverse lookup on them)

---

Revision 416 - Directory Listing
Modified Tue Nov 23 02:19:39 2010 UTC (13 years, 4 months ago) by misc

add filter compilation as this can reduce the load on server

---

Revision 415 - Directory Listing
Modified Tue Nov 23 02:19:38 2010 UTC (13 years, 4 months ago) by misc

no one here want receive a mail when we are hot by a virus, I think

---

Revision 414 - Directory Listing
Modified Tue Nov 23 02:19:37 2010 UTC (13 years, 4 months ago) by misc

- add spamassassin module

---

Revision 413 - Directory Listing
Modified Tue Nov 23 02:19:36 2010 UTC (13 years, 4 months ago) by misc

- add the start of a amavis module ( to interface postfix with spamassassin )

---

Revision 412 - Directory Listing
Modified Tue Nov 23 01:14:05 2010 UTC (13 years, 4 months ago) by misc

- it is IMHO cleaner and logical to have apache::vhost_other_app directly requiring apache::base rather than letting every people adding it when using the class

---

Revision 411 - Directory Listing
Modified Tue Nov 23 01:11:15 2010 UTC (13 years, 4 months ago) by misc

- add a comment so I do not have the impression to have
 lost 4h on debugging pam_ldap and openssh

---

Revision 410 - Directory Listing
Modified Tue Nov 23 01:11:14 2010 UTC (13 years, 4 months ago) by misc

class was renamed 3 commits ago

---

Revision 409 - Directory Listing
Modified Tue Nov 23 01:11:12 2010 UTC (13 years, 4 months ago) by misc

add class for scp and sftp

---

Revision 408 - Directory Listing
Modified Tue Nov 23 01:11:10 2010 UTC (13 years, 4 months ago) by misc

- split the module in 2 part, and add class to allow to more easyly
combine the autorized shell

---

Revision 407 - Directory Listing
Modified Tue Nov 23 01:11:08 2010 UTC (13 years, 4 months ago) by misc

- use pam for openssh ( I am not sure if we need to restrict its use
  only on ldap hosts )

---

Revision 406 - Directory Listing
Modified Tue Nov 23 01:11:07 2010 UTC (13 years, 4 months ago) by misc

- rewrite restricted_shell, and split the shell in its own subclass

---

Revision 405 - Directory Listing
Modified Mon Nov 22 23:30:59 2010 UTC (13 years, 4 months ago) by blino

include apache::base

---

Revision 404 - Directory Listing
Modified Mon Nov 22 23:29:27 2010 UTC (13 years, 4 months ago) by blino

fix typo

---

Revision 403 - Directory Listing
Modified Mon Nov 22 23:29:03 2010 UTC (13 years, 4 months ago) by blino

add repository vhost for main BS node

---

Revision 402 - Directory Listing
Modified Mon Nov 22 16:12:51 2010 UTC (13 years, 4 months ago) by blino

use default iurt_root_command

---

Revision 401 - Directory Listing
Modified Mon Nov 22 16:12:13 2010 UTC (13 years, 4 months ago) by blino

upload as iurt user, not schedbot

---

Revision 400 - Directory Listing
Modified Mon Nov 22 14:20:10 2010 UTC (13 years, 4 months ago) by buchan

Add timelimits for nss_ldap, enable password policy

---

Revision 399 - Directory Listing
Modified Mon Nov 22 13:59:56 2010 UTC (13 years, 4 months ago) by blino

create schedbot user before writing ssh config files

---

Revision 398 - Directory Listing
Modified Mon Nov 22 13:54:58 2010 UTC (13 years, 4 months ago) by blino

install iurt on main node as well, for scheduler tools

---

Revision 397 - Directory Listing
Modified Mon Nov 22 13:46:30 2010 UTC (13 years, 4 months ago) by blino

fix indent

---

Revision 396 - Directory Listing
Modified Mon Nov 22 13:33:04 2010 UTC (13 years, 4 months ago) by blino

schedbot can login as iurt on nodes

---

Revision 395 - Directory Listing
Modified Mon Nov 22 13:29:59 2010 UTC (13 years, 4 months ago) by blino

add schedbot on main node

---

Revision 394 - Directory Listing
Modified Mon Nov 22 13:22:43 2010 UTC (13 years, 4 months ago) by blino

fix sshuser definition

---

Revision 393 - Directory Listing
Modified Mon Nov 22 13:21:17 2010 UTC (13 years, 4 months ago) by blino

extract a sshuser definition

---

Revision 392 - Directory Listing
Modified Mon Nov 22 13:20:26 2010 UTC (13 years, 4 months ago) by buchan

Fix host access to posixAccount attrs

---

Revision 391 - Directory Listing
Modified Mon Nov 22 13:15:24 2010 UTC (13 years, 4 months ago) by misc

- set the ldap password in /etc/ldap.secret

---

Revision 390 - Directory Listing
Modified Mon Nov 22 13:15:23 2010 UTC (13 years, 4 months ago) by misc

- make sure nscd is installed and running

---

Revision 389 - Directory Listing
Modified Mon Nov 22 13:15:22 2010 UTC (13 years, 4 months ago) by misc

- use the rootbinddn as preconized by buchan ( and let all access goes
  through nscd )

---

Revision 388 - Directory Listing
Modified Mon Nov 22 13:15:21 2010 UTC (13 years, 4 months ago) by misc

- use the first pass if proposed ( or pam ask the password 2 times )

---

Revision 387 - Directory Listing
Modified Mon Nov 22 12:41:54 2010 UTC (13 years, 4 months ago) by blino

use build_login variable in build_home_dir

---

Revision 386 - Directory Listing
Modified Mon Nov 22 12:29:28 2010 UTC (13 years, 4 months ago) by blino

useradd module does not support password change, use usermod

---

Revision 385 - Directory Listing
Modified Mon Nov 22 12:13:10 2010 UTC (13 years, 4 months ago) by blino

set password to * to unlock the account but forbid login through login

---

Revision 384 - Directory Listing
Modified Mon Nov 22 07:30:07 2010 UTC (13 years, 4 months ago) by blino

remove home def

---

Revision 383 - Directory Listing
Modified Mon Nov 22 07:29:23 2010 UTC (13 years, 4 months ago) by blino

ensure home is a directory

---

Revision 382 - Directory Listing
Modified Mon Nov 22 07:23:36 2010 UTC (13 years, 4 months ago) by blino

remove trailing slash from home dir

---

Revision 381 - Directory Listing
Modified Mon Nov 22 07:21:22 2010 UTC (13 years, 4 months ago) by blino

use again include instead of require to avoid deps cycle

---

Revision 380 - Directory Listing
Modified Mon Nov 22 07:20:25 2010 UTC (13 years, 4 months ago) by blino

home should be tested as a directory

---

Revision 379 - Directory Listing
Modified Mon Nov 22 07:15:50 2010 UTC (13 years, 4 months ago) by blino

require instead of including iurtuser (so that .ssh is created before)

---

Revision 378 - Directory Listing
Modified Mon Nov 22 02:04:06 2010 UTC (13 years, 5 months ago) by misc

- add default password of x, so manifests do not fail on test vms

---

Revision 377 - Directory Listing
Modified Mon Nov 22 02:04:04 2010 UTC (13 years, 5 months ago) by misc

- add nssldap password handling

---

Revision 376 - Directory Listing
Modified Mon Nov 22 02:04:03 2010 UTC (13 years, 5 months ago) by misc

- add proper access to nss_ldap user so pam_ldap auth can work

---

Revision 375 - Directory Listing
Modified Mon Nov 22 02:04:02 2010 UTC (13 years, 5 months ago) by misc

- do not hardcode mageia.org in acl

---

Revision 374 - Directory Listing
Modified Mon Nov 22 02:03:58 2010 UTC (13 years, 5 months ago) by misc

- ldaps is required ( ie no unencrypted connection )

---

Revision 373 - Directory Listing
Added Mon Nov 22 00:46:57 2010 UTC (13 years, 5 months ago) by blino

use build_home_dir